2 General Information about Integrated Safety Systems
11.03
2.12 Error analysis
© Siemens AG 2003 All Rights Reserved
2-46
SINUMERIK 840D/SIMODRIVE 611 digital SINUMERIK Safety Integrated (FBSI) - Edition 11.03
2.12 Error analysis
The SINUMERIK 840D control with SIMODRIVE 611 digital is equipped with
various monitoring functions that detect system errors and initiate the
appropriate reactions (refer to the relevant documentation).
These standard functions do not comply with safety Category 3 according to
EN 954-1.
The safety functions of SI that are based on crosswise data comparison and
forced checking procedure are capable of detecting system errors and bringing
the machine into a safe condition (refer to Chapter 3, "Safety Functions").
Based on the appropriate Directives and Standards, a detailed fault analysis is
carried-out using SINUMERIK Safety Integrated
. The subsequently listed brief
summary lists the disturbing effects and system faults controlled by
SINUMERIK Safety Integrated
with an extremely low residual risk; whereby
the basis was disturbing quantities that are already known.
Table 2-11
Error analysis in the set-up mode
Assumed error Error causes
Error control
MDIR, Appendix
1)
Comments
Spindle speed
too high
Defect in the
drive or control
system,
Encoder fault in
2-encoder
operation,
operator error
etc.
Safe limitation of speed
or axis velocity with SG;
configurable stop
functions according to
Cat. 2
Chapter 1.2.4
Chapter 1.2.7
Chapter 1.3.6
According to currently
applicable standards (TC143),
the SG function is – depending
on the technology – only
permissible in combination with
agreement, jog mode, start
button and Emergency Stop
Axis speed too
high
According
to
currently
applicable standards (TC143),
the SG function is – depending
on the technology – only
permissible in combination with
jog mode, start button and
Emergency Stop
Axis or spindle
has
inadmissibly
moved away
from standstill
position
Defect in the
drive or control
system,
operator error
etc.
Safe standstill monitoring
for position control with
SBH;
configurable stop
function, Cat. 0/1
Chapter 1.2.6
Chapter 1.2.7
Chapter 1.3.6
Chapter 1.4.2
Chapter 1.4.3
Low-wear safe shutdown of the
energy feed to the drive,
this function does not replace
the main machine breaker
Safe standstill with SH,
Stop function, Cat. 0
for
electrical
isolation
Axes have
inadmissibly
exited operating
range
Defect in the
drive or control
system,
operator error
etc.
" Safe software limit
switches" SE;
configurable stop
functions according to
Cat. 2
Chapter 1.2.4
Chapter 1.2.7
Chapter 1.3.7
Chapter 1.3.8
Is essentially used for
machinery protection,
can also be used to restrict
working zones in conjunction
with personnel protection
Response of
machine control
to incorrect
position signal
Defect in the
control
operator error
etc.
"Safe software cams" SN;
safe signal and position
output
Chapter 1.2.4
Chapter 1.2.7
Chapter 1.3.8
Chapter 1.4.2
Chapter 1.4.3
Wear-free "safe software cams
(SN)
used to safely detect the
position of axes.
Can be used to isolate physical
areas
Error relating to
the input/output
of process data
Defective
cable,
incorrect
information, or
similar
Two-channel input/output
of safety-relevant signals
(SGE/SGA), crosswise
data comparison;
initiation of stop functions
according to Cat. 1
Chapter 1.2.5
Chapter 1.3.8
Chapter 1.4.2
Chapter 1.4.3
External two-channel inputs or
further processing required if
function is intended to protect
operating personnel
1)
refer to: Appendix, References General /1/
Monitoring
Fault analysis
